$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: A9BdB0j4IxNz2nEHXKYZKlO/iiXAeLUgZQpPi/bHKXU= Subject key identifier: D1:F1:89:CC:97:EC:88:4C:D0:9A:B8:09:B5:2D:D0:0F:CD:D8:86:28 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 19E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 19B3 Signing time: Tue 22 Sep 2026 16:20:10 +0000 Manifest this update: Tue 22 Sep 2026 16:20:10 +0000 Manifest next update: Tue 29 Sep 2026 16:20:10 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: dg9aOdgJEdml1JAtd3oXz3XeRr5aJOXs/rmk2fnRKAE=) 2: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=) 3: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 16:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6633 (0x19e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Sep 22 16:20:10 2026 GMT Not After : Sep 29 16:20:10 2026 GMT Subject: CN=6ab2aaba-b5b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8d:9e:7e:78:5d:cf:fc:62:71:da:e8:3b:e9: 30:7a:8b:21:4f:21:d3:be:5d:54:fb:9e:52:a3:bd: ba:4f:0e:d5:6c:4b:ac:7c:47:02:52:0a:1b:c2:f3: 5d:52:50:63:65:d6:83:24:51:ba:3d:72:d8:0d:21: 3e:dd:78:5c:36:ea:34:f9:c3:be:5f:20:27:7a:e8: 1b:4c:e9:cd:f1:2c:12:85:4e:23:14:32:0f:63:48: 6e:42:0a:e2:94:dc:d6:b9:8d:12:ff:1c:1f:78:be: 30:e5:7a:c6:f1:49:e5:d9:86:99:1a:46:76:e1:fd: 41:c5:cb:ed:6b:9b:25:22:b9:b0:95:db:8c:d1:0e: 9b:a2:18:54:b9:8d:9e:9b:ec:bc:15:fc:04:55:2d: f5:f1:46:a7:ed:25:e6:18:71:94:40:b2:0c:a9:76: bd:6a:74:d2:f0:be:d1:cb:2b:55:80:8a:02:ea:67: 33:5d:82:59:ad:90:ba:49:9e:09:18:19:6e:7a:78: 7f:a6:ff:bc:b6:57:51:fa:e1:71:bf:3b:7d:a7:68: bd:cd:77:a5:bc:51:e9:e2:83:04:e5:e7:fd:ae:e4: d3:38:66:3e:54:ab:98:a1:e6:38:3e:06:d7:d8:df: d5:a3:84:60:14:c6:ea:ea:b3:fd:59:3b:15:b0:e1: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F1:89:CC:97:EC:88:4C:D0:9A:B8:09:B5:2D:D0:0F:CD:D8:86:28 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:e3:98:fc:ac:ce:3f:04:9c:8c:cf:0f:f7:12:c2:68:3f: 48:63:77:5b:86:5f:65:db:4c:55:36:95:e2:8f:7c:25:5f:fe: fb:eb:a8:42:03:f4:62:6b:a8:99:f1:7f:15:65:c1:ad:1d:6a: e7:81:1c:1d:b2:6c:7e:d8:2a:47:a5:bc:f2:a7:75:27:de:06: c3:2e:ef:45:f8:48:d0:63:58:9e:0d:e3:2e:39:9c:40:1e:55: c6:f3:7b:1c:7c:3b:68:8d:9f:40:b4:d6:9f:5a:84:d2:0a:bf: ba:fc:9e:74:20:fe:e2:73:57:ff:cb:82:bb:07:a8:71:fd:7f: e8:eb:06:c8:58:42:3b:22:31:9d:38:ea:6e:9f:70:85:c4:d9: 25:48:97:10:1e:6f:23:c3:53:60:15:7d:7a:26:4d:c9:c1:ce: ab:7e:d8:f3:bd:b7:c1:79:3b:88:a3:ed:b9:d6:2d:7f:14:f1: 2c:ca:06:3d:a8:e2:ce:27:a1:e6:da:9a:eb:94:cf:fb:1a:71: ba:7f:60:b5:39:d9:da:bc:15:2c:84:3e:76:bb:4b:2f:d6:6e: 83:23:26:c6:81:8b:e9:d8:f2:9d:1c:68:61:f1:15:15:cb:3a: 25:09:17:f7:7c:d9:5a:3a:10:3d:cb:45:45:03:fb:65:3c:38: f0:10:0b:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjYwOTIyMTYyMDEwWhcNMjYwOTI5MTYyMDEwWjAYMRYwFAYD VQQDEw02YWIyYWFiYS1iNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA142efnhdz/xicdroO+kweoshTyHTvl1U+55So726Tw7VbEusfEcCUgobwvNd UlBjZdaDJFG6PXLYDSE+3XhcNuo0+cO+XyAneugbTOnN8SwShU4jFDIPY0huQgri lNzWuY0S/xwfeL4w5XrG8Unl2YaZGkZ24f1Bxcvta5slIrmwlduM0Q6bohhUuY2e m+y8FfwEVS318Uan7SXmGHGUQLIMqXa9anTS8L7RyytVgIoC6mczXYJZrZC6SZ4J GBluenh/pv+8tldR+uFxvzt9p2i9zXelvFHp4oME5ef9ruTTOGY+VKuYoeY4PgbX 2N/Vo4RgFMbq6rP9WTsVsOF7/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHxicyX 7IhM0Jq4CbUt0A/N2IYoMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXfrjmPyszj8EnIzPD/cSwmg/SGN3W4ZfZdtMVTaV4o98JV/+++uoQgP0Ymuo mfF/FWXBrR1q54EcHbJsftgqR6W88qd1J94Gwy7vRfhI0GNYng3jLjmcQB5VxvN7 HHw7aI2fQLTWn1qE0gq/uvyedCD+4nNX/8uCuweocf1/6OsGyFhCOyIxnTjqbp9w hcTZJUiXEB5vI8NTYBV9eiZNycHOq37Y8723wXk7iKPtudYtfxTxLMoGPajizieh 5tqa65TP+xpxun9gtTnZ2rwVLIQ+drtLL9ZugyMmxoGL6djynRxoYfEVFcs6JQkX 93zZWjoQPctFRQP7ZTw48BAL6A== -----END CERTIFICATE-----Generated at Wed Sep 23 21:43:11 2026 by rpki-client